@withpica/mcp-server 2.97.0 → 2.97.1

package/CHANGELOG.md

@@ -11,6 +11,58 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.97.1] - 2026-09-08
+
+### Added
+
+- **`pica_catalog_health_fix` accepts `selections: [{actionId, chosenPersonId}]`**
+  — the human choice a `resolve_person` action needs (one of its
+  `preview.candidates[].personId`). A selection accepts its action; a choice
+  the plan never offered is skipped `guard_blocked` with the reason. Until now
+  the applier required a chosen person the tool had no way to pass, so every
+  accepted `resolve_person` came back `stale` (feedback 2026-09-05).
+- **`pica_find_duplicates` sees identifier-less copies.** Recordings group on
+  title + artist and releases on title + equal track count when the ISRC/UPC
+  pass cannot see them (`match_kind: "title_artist"`, keep-separate default);
+  a UPC shared by releases with different titles is reported as
+  `shared_upc_different_title` — the decision is "correct the UPC", with no
+  fold option (feedback 2026-09-05).
+
+### Fixed
+
+- **`pica_works_update {collaborators}` is refused with a redirect** to
+  `pica_credits_update` / `pica_credit_add`. `works.collaborators` is a
+  legacy jsonb mirror; the write showed correct splits on inspect while the
+  `work_collaborators` rows every health check reads still disagreed, and the
+  health plan then proposed "fixing" them (feedback 2026-09-05).
+- **Accepting a held finding is a typed 409, not `INTERNAL_ERROR`.** The
+  apply route now maps every "is already <status>" refusal to
+  `PROPOSAL_ALREADY_CLOSED`, and a held one carries the unlock sentence
+  (`pica_billing_pay`, offer `unlock`, `entity_id` the work) — a ChatGPT user
+  hit "internal server error" three times on 2026-09-04.
+- **`pica_credit_add` never invents a share.** An omitted `share_pct` on a
+  composition credit is stored as NULL (unknown), not 0 — a 0 read as a real
+  share, so the health plan rescaled the other writer to 100 and the second
+  writer's stake vanished (holdout lock, 2026-09-06). For `credit_type:
+"owner"` the share is now REQUIRED (`OWNER_SHARE_REQUIRED`, 422): master
+  ownership is recorded as given, never assumed to be 100.
+- **`pica_releases_update` documents the UPC backfill trigger** — it fires
+  only on a write to `spotify_album_id`, so re-sending the existing id is the
+  way to backfill a UPC (ops issue 9f33cc59).
+
+- **`pica_subscription_status` is callable on the hosted connector.** It was
+  declared `scope: admin`, `audiences: ["stdio"]` while `pica_billing_pay` was
+  `read:catalog` on both surfaces, so a connected agent could mint a pay link
+  but not read the plan it would be paying for (`callable_on_this_surface:
+false` on claude.ai, 2026-09-04). Both now share the catalogue-read floor;
+  `pica_subscription_manage` stays stdio + admin.
+- **The pay path is visible to an agent that never calls `pica_discover`.**
+  The server instructions name `pica_subscription_status` and
+  `pica_billing_pay` with the exact `pica_execute` shape inside the first
+  2,000 characters (the observed cut on the claude.ai connector), and the
+  `pica_discover` description lists "how do i pay pica" among its example
+  queries for clients that surface tool descriptions but not instructions.
+
 PR #2118 (`fix/avatar-import-path-2026-09-03`) is merged into the release branch, so its changes ship in the version below; publish in the order mcp-utils → mcp-sdk → mcp-server.
 
 ## [2.97.0] - 2026-09-04

package/README.md

@@ -65,7 +65,7 @@ Read tools are annotated read-only and are safe to call freely. Write tools repo
 
 ## Tools
 
-330 tools, grouped below by the taxonomy `pica_discover` uses. The server's own `tools/list` is authoritative — not every registered tool is filed under a category yet, so the names below are a map, not a census.
+335 tools, grouped below by the taxonomy `pica_discover` uses. The server's own `tools/list` is authoritative — not every registered tool is filed under a category yet, so the names below are a map, not a census.
 
 **works** — manage your musical works
 
@@ -235,6 +235,10 @@ Read tools are annotated read-only and are safe to call freely. Write tools repo
 
 `pica_royalties_summary`, `pica_royalties_list`, `pica_royalties_get`, `pica_statements_query`, `pica_statements_inspect`, `pica_ingest_statement`, `pica_statements_pending`, `pica_statement_ingest_document`, `pica_royalties_unmatched`, `pica_royalties_attribute`
 
+**selections** — save, recall, and resolve named catalog selections — persisted predicates over the catalogue with an honest coverage report
+
+`pica_selections_create`, `pica_selections_query`, `pica_selections_inspect`, `pica_selections_update`, `pica_selections_delete`
+
 **share links** — create, inspect, update, and delete share links for catalog content
 
 `pica_share_links_create`, `pica_share_links_query`, `pica_share_links_inspect`, `pica_share_links_update`, `pica_share_links_delete`